Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File:                     DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier:          lLHvqgZpKktuwJ/mz9M1mfJVn0D2BQNahJIldCIBWLM=
Subject key identifier:   43:31:C0:3C:2D:09:B6:D9:3C:CB:15:AD:DD:5A:22:47:32:C0:C9:E4
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer:       /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial:       01962F74663993009C605EB4C65CDC6CFE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: 2fh34Mu6UCFFTyfKX3/yHxEOCfp4muuoNDryP+zNZj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:66:39:93:00:9c:60:5e:b4:c6:5c:dc:6c:fe:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=4331c03c2d09b6d93ccb15addd5a224732c0c9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:33:98:d5:f5:95:10:61:9f:ed:86:ce:51:
                    10:c2:3e:50:da:0e:8e:0d:47:3f:15:47:70:b8:e5:
                    3a:82:97:1c:68:87:d9:96:50:f3:ab:31:f0:ab:da:
                    b1:9a:93:95:a8:10:7b:c3:aa:f5:9d:2a:94:89:74:
                    a5:8f:fa:8c:38:3d:cb:57:2d:4c:46:cd:18:24:c9:
                    9d:8a:e4:55:fa:de:22:9e:8e:f5:2d:6f:9f:c9:b1:
                    d4:3c:28:51:26:44:7f:39:aa:de:c2:24:a9:bf:1c:
                    a5:8b:9c:db:b3:39:9e:b1:e3:2c:23:26:44:2d:fb:
                    e4:dc:b8:77:c9:61:61:56:10:d4:6f:ab:d6:3d:de:
                    66:a4:f0:f5:81:ae:3d:77:d3:dd:8e:88:a5:64:d7:
                    a7:7a:27:d2:5d:13:d1:4a:3b:0a:6c:97:cc:60:0a:
                    de:ba:ec:c3:6c:52:0d:2f:63:9c:97:ee:0d:ef:f4:
                    63:03:5f:7e:a8:15:f2:76:f0:c1:4d:09:65:a4:b3:
                    0e:d9:74:b0:7a:02:2d:a3:50:91:9f:01:cb:c8:ef:
                    44:b9:2e:54:cc:d0:99:25:26:34:1a:db:35:08:e7:
                    8b:b9:4e:36:17:ec:0a:d1:c4:74:3a:85:9d:26:ed:
                    bb:ac:e3:a1:85:c9:28:38:cc:91:4b:77:1f:3f:e2:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:31:C0:3C:2D:09:B6:D9:3C:CB:15:AD:DD:5A:22:47:32:C0:C9:E4
            X509v3 Authority Key Identifier:
                keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:85:a5:24:0f:7a:c4:31:54:47:f2:6d:dc:10:b0:16:92:d9:
         d6:62:54:f3:1c:b5:17:8b:53:4f:d2:d0:93:a2:f8:fb:03:73:
         b0:9d:cf:da:18:ea:8e:ab:96:1a:cb:0b:78:c7:f9:72:f2:37:
         e9:bf:ac:4d:f5:67:51:ef:cd:91:70:29:db:58:90:46:0e:a4:
         cd:f5:ce:40:cf:2b:10:fd:b6:86:c8:34:2d:1c:84:ba:95:26:
         b0:ef:5f:d0:65:a9:b5:6d:4e:3d:fc:86:2d:0b:a3:a4:f2:6b:
         67:73:20:e6:e2:9f:7c:68:e2:22:e0:c2:a4:4f:40:95:a7:72:
         5e:db:25:b2:b7:5a:ab:4b:2d:f1:62:c2:73:33:f8:e6:2e:b3:
         0f:e5:77:b4:d1:fd:97:a1:7d:7c:cc:c5:e2:ce:b1:40:3f:4e:
         42:c7:ab:7a:95:b4:25:a0:30:f8:de:a0:51:9d:23:2a:38:4a:
         e2:f3:65:f0:40:8d:4a:11:54:64:4c:38:33:d5:63:6b:3a:ba:
         ad:6a:cb:b4:8c:03:f2:ac:01:fb:4f:57:f2:f0:c5:ce:0a:6c:
         3f:b9:81:9d:6a:ed:6d:31:7d:4d:1d:50:ad:16:6b:50:02:d1:
         f2:b1:73:f5:f1:08:11:44:0a:7a:6d:6a:04:60:5a:4a:e1:26:
         16:58:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----